N8n Workflow Patterns
Romuald CzlonkowskiCommunityCreated by Romuald Czlonkowski
- Skill
- Guidelines
- Automation and integrations
- MIT
- Medium risk
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
This skill provides a structured framework for designing n8n workflows based on six core architectural patterns: Webhook Processing, HTTP API Integration, Database Operations, AI Agent Workflows, Scheduled Tasks, and Batch Processing. It offers a comprehensive checklist for the entire workflow lifecycle, from planning and implementation to validation and deployment. The skill emphasizes native node usage, effective error handling, and performance considerations for processing data, ensuring workflows are robust, maintainable, and correctly structured.
What it does
- Defines six core architectural patterns for n8n automation.
- Provides a step-by-step workflow creation and validation checklist.
- Offers guidance on choosing the right trigger and transformation nodes.
- Details strategies for batch processing and handling API rate limits.
- Outlines best practices for error handling and workflow monitoring.
- Includes specific patterns for AI agent integration and database synchronization.
When to use it
- When designing the architecture for a new n8n automation.
- When choosing between different workflow patterns like webhooks or scheduled tasks.
- When optimizing the structure of an existing, complex workflow.
- When troubleshooting data flow or performance issues in a workflow.
- When preparing a workflow for production deployment.
Advantages
- Standardizes workflow design using proven architectural patterns.
- Reduces development time by providing clear implementation paths.
- Improves workflow reliability through structured validation and error handling.
- Helps avoid common pitfalls in node configuration and data mapping.
- Provides clear guidance on when to use specific nodes versus custom code.
Usage examples
- “How should I structure a workflow that receives data from a webhook and updates a database?”
- The agent will recommend the Webhook Processing pattern, detailing the sequence of Webhook trigger, validation, transformation, and database write nodes.
- “I need to process thousands of records from an API without hitting rate limits. What pattern should I use?”
- The agent will suggest the Batch Processing pattern, explaining how to use the SplitInBatches node to chunk data and manage API calls effectively.
- “What is the best way to handle errors in my n8n workflow?”
- The agent will outline the Error Handler pattern, including the use of Error Triggers and the 'Continue On Fail' node setting.
- “How do I build an AI agent that can query my database?”
- The agent will provide the AI Agent Workflow pattern, including the setup for the AI Agent node, memory, and database tools.
Install
Download the skill as a ZIP:
https://autogineer.com/agent-skills/czlonkowski/n8n-workflow-patterns/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip n8n-workflow-patterns.zip -d .agents/skills
Documentation by Romuald Czlonkowski
n8n Workflow Patterns
Proven architectural patterns for building n8n workflows.
The 6 Core Patterns
Based on analysis of real workflow usage:
Webhook Processing (Most Common)
Receive HTTP requests → Process → Output
Pattern: Webhook → Validate → Transform → Respond/Notify
Fetch from REST APIs → Transform → Store/Use
Pattern: Trigger → HTTP Request → Transform → Action → Error Handler
Read/Write/Sync database data
Pattern: Schedule → Query → Transform → Write → Verify
AI agents with tools and memory
Pattern: Trigger → AI Agent (Model + Tools + Memory) → Output
Recurring automation workflows
Pattern: Schedule → Fetch → Process → Deliver → Log
Batch Processing (below)
Process large datasets in chunks with API rate limits
Pattern: Prepare → SplitInBatches → Process per batch → Accumulate → Aggregate
Pattern Selection Guide
When to use each pattern:
Webhook Processing - Use when:
Receiving data from external systems
Building integrations (Slack commands, form submissions, GitHub webhooks)
Need instant response to events
Example: "Receive Stripe payment webhook → Update database → Send confirmation"
HTTP API Integration - Use when:
Fetching data from external APIs
Synchronizing with third-party services
Building data pipelines
Example: "Fetch GitHub issues → Transform → Create Jira tickets"
Database Operations - Use when:
Syncing between databases
Running database queries on schedule
ETL workflows
Example: "Read Postgres records → Transform → Write to MySQL"
AI Agent Workflow - Use when:
Building conversational AI
Need AI with tool access
Multi-step reasoning tasks
Example: "Chat with AI that can search docs, query database, send emails"
Scheduled Tasks - Use when:
Recurring reports or summaries
Periodic data fetching
Maintenance tasks
Example: "Daily: Fetch analytics → Generate report → Email team"
Batch Processing - Use when:
Processing large datasets that exceed API batch limits
Need to accumulate results across multiple API calls
Nested loops (e.g., multiple categories × paginated API calls per category)
Example: "Fetch products for 4 markets × 1000 per API call → Aggregate all results"
Common Workflow Components
All patterns share these building blocks:
1. Triggers
Webhook - HTTP endpoint (instant)
Schedule - Cron-based timing (periodic)
Manual - Click to execute (testing)
Polling - Check for changes (intervals)
2. Data Sources
HTTP Request - REST APIs
Database nodes - Postgres, MySQL, MongoDB
Service nodes - Slack, Google Sheets, etc.
Extract From File - CSV / XLSX / PDF from a downloaded or uploaded file
3. Transformation (native first)
Filter / IF / Switch - Drop items, route
Edit Fields (Set) - Named steps: constant items, payload objects, error and return items
Summarize / Aggregate / Split Out - Group and total, collect into an array, explode an array
Merge / Compare Datasets - Join two lists, diff them for a sync
Remove Duplicates / Sort / Limit - Dedupe (also across runs), top-N
Date & Time, XML, HTML, Crypto - Dates, markup, hashes and signatures
Code - Only the closed list (loops or recursion no node expresses, state across runs, parsing no node handles), with a
Why Code:note
The job-to-node table in using-n8n-mcp-skills maps jobs to these nodes; configs are in n8n-node-configuration → NATIVE_NODES.md. Reading a filtered slice of a nested API response for one field? A single {{ $jmespath($json, "…") }} in that field does it without extra nodes (quoting rules in n8n-expression-syntax).
4. Outputs
HTTP Request - Call APIs
Database - Write data
Communication - Email, Slack, Discord
Storage - Files, cloud storage
5. Error Handling
Error Trigger - Catch workflow errors
IF - Check for error conditions
Stop and Error - Explicit failure
Continue On Fail - Per-node setting
Workflow Creation Checklist
When building ANY workflow, follow this checklist:
Planning Phase
[ ] Identify the pattern (webhook, API, database, AI, scheduled)
[ ] List required nodes (use search_nodes)
[ ] Understand data flow (input → transform → output)
[ ] Plan error handling strategy
Implementation Phase
[ ] Create workflow with appropriate trigger
[ ] Add data source nodes
[ ] Configure authentication/credentials
[ ] Add transformation nodes (native first: Filter, IF, Summarize, Merge…; Code only with a
Why Code:note)[ ] Add output/action nodes
[ ] Configure error handling
Validation Phase
[ ] Validate each node configuration (validate_node)
[ ] Validate complete workflow (validate_workflow)
[ ] Test with sample data
[ ] Handle edge cases (empty data, errors)
Deployment Phase
[ ] Review workflow settings (execution order, timeout, error handling)
[ ] Activate workflow using
activateWorkflowoperation[ ] Monitor first executions
[ ] Document workflow purpose and data flow
Workflow lifecycle: validate, verify, test before activating
Building the nodes is the start, not the finish. Before a workflow goes live, run it through four gates — and remember the headline rule: validation passing is necessary, not sufficient. A workflow can validate clean and still drop items, pick the wrong Merge input, or post Slack messages as plain text. Clean validation means the shapes are right, not that the logic is.
Validate. Run
validate_workflowon the full JSON during build, orn8n_validate_workflow({ id })once the workflow exists on the instance. Fix every error and re-validate. This catches schema, node-config, expression, and reference errors — the structural layer.Verify the connections. Pull the workflow with
n8n_get_workflow({ id })and read theconnectionsobject directly. Validation confirms connections aren't broken; it doesn't confirm they're correct. This is where you catch the valid-but-wrong wiring: a Merge whoseuseDataOfInputdoesn't line up with the connection slot, a Switch fallback that connects to nothing, a fan-out branch that was never wired onward, an error output that goes nowhere. (See the n8n Node Configuration skill's NODE_FAMILY_GOTCHAS.md for the silent ones.)Test. Run
n8n_test_workflowand inspect the output vian8n_executions. Confirm the output shape matches what consumers expect, fan-outs all produced data, and (for webhook APIs) the status/body/headers are right. Real side effects fire during a test — writes commit, messages send, external APIs are called. If any node has a user-visible side effect, confirm with the user before running, or test against safe data first.Activate only after the first three pass — using
n8n_update_partial_workflowwith theactivateWorkflowoperation. Don't activate straight off a clean validation; an active workflow that drops data or double-sends is worse than one that never started.
Skipping any gate trades a few minutes now for debugging a live, possibly stateful, possibly traffic-bearing workflow later. The trade is never worth it.
Data Flow Patterns
Linear Flow
Trigger → Transform → Action → EndUse when: Simple workflows with single path
Branching Flow
Trigger → IF → [True Path]
└→ [False Path]Use when: Different actions based on conditions
Parallel Processing
Trigger → [Branch 1] → Merge
└→ [Branch 2] ↗Use when: Independent operations that can run simultaneously
Loop Pattern
Trigger → Split in Batches → Process → Loop (until done)Use when: Processing large datasets in chunks
Error Handler Pattern
Main Flow → [Success Path]
└→ [Error Trigger → Error Handler]Use when: Need separate error handling workflow
Batch Processing Pattern
SplitInBatches Loop
The SplitInBatches node splits a large dataset into smaller chunks for processing. Understanding its outputs is critical:
main[0]= done — fires ONCE after all batches completemain[1]= each batch — fires per batch (this is the loop body)
Prepare Items → SplitInBatches → [main[1]: Process Batch] → (loops back)
[main[0]: Done] → Limit 1 → AggregateAlways add a Limit 1 node after the done output.
Choosing batchSize (the cost lever)
A SplitInBatches loop re-runs its whole body once per iteration — ~0.8 ms/iteration of engine overhead plus the body's own cost — so total ≈ ⌈items / batchSize⌉ × (overhead + body). batchSize is a direct speed dial:
Pick the largest batch your real constraint allows (API page size, rate limit, memory). Bigger batches = fewer iterations = less overhead; the body still sees every item.
batchSize: 1is the expensive extreme — one full engine pass per item. Use it only when you must act on a single item at a time (nested-loop control, or an API that takes exactly one id).If you're looping only to "go over the items" with no external constraint, you don't need the loop: connect the source to the consumer. Per-item execution handles it, and native transform nodes process all items in one call.
Cross-Iteration Data
After the loop, $('Node Inside Loop').all() returns ONLY the last batch's items. To accumulate across all iterations, use $getWorkflowStaticData('global') in a Code node inside the loop. See the n8n Code JavaScript skill for the full pattern.
Nested Loops
When processing N categories × M items per category (where an API has a batch limit):
Define Categories (N items)
→ Outer Loop (SplitInBatches, batchSize=1)
→ Prepare category data
→ Inner Loop (SplitInBatches, batchSize=1000)
→ API Call → Verify → (loops back to Inner Loop via main[1])
→ Inner done[0] → Rate Limit Delay → back to Outer Loop
→ Outer done[0] → Limit 1 → Final AggregateWiring gotcha: The inner done[0] must connect back to the OUTER loop input, not to the aggregate. The outer done[0] feeds the final aggregate.
API Pagination
Paging through one endpoint is HTTP Request's pagination option, not a loop (page-number, offset, cursor and next-URL APIs, with a page cap — see n8n-node-configuration → NATIVE_NODES.md). The loop below is for sweeps the option can't express, such as an API without multi-ID filtering that you walk with id_from + date windows, each window its own query:
Schedule → Set Date Window → Fetch Page → Process
→ IF has more? → [true] Update id_from → Fetch Page (loop)
→ [false] → Aggregate → OutputDry-Run / Verification Tolerance
When testing with API write nodes disabled (for dry runs), downstream verification nodes receive the request body instead of the response. Make verification tolerant:
// In verification Code node
const body = $input.first().json;
const looksLikeRequest = body.method && body.parameters && !body.status;
if (looksLikeRequest) {
return [{ json: { status: 'SKIPPED', message: 'Upstream disabled for testing' }}];
}
// Normal response verification below...Performance on the hot path
When a workflow processes thousands of items with little I/O, its speed is set by how many times n8n crosses a per-item / per-iteration boundary — each crossing sets up an execution context and copies the items. Four architecture choices dominate:
Consolidating a hot chain into one Code node is an exception, not a default. Every node→node hop re-copies all items, so on a measured hot path — thousands of items per run, transform work rather than I/O dominating — one All-Items Code node can beat a long chain. That is the closed list's "heavy all-items work" case: record it in the node's
Why Code:note. Below that, native nodes win on readability.If Code stays, use "Run Once for All Items," not "Each Item." Each Item pays a full sandbox per item; a chain of Each-Item Code nodes is the worst case, because the per-item tax multiplies by node count.
Maximize batchSize in SplitInBatches loops (see the Batch Processing pattern above) — iterations are the cost.
Don't micro-optimize expressions — complexity is free; node and iteration count are what you pay for.
But profile first. Most production workflows are I/O-bound — sequential HTTP / DB / Sheets calls (hundreds of ms each) dwarf all of the above. These rules matter when transform work is the floor, or when an anti-pattern (Each-Item Code, batchSize 1, long per-item chains) turns a cheap operation into a slow one. Below a few hundred items, none of it matters. The n8n Code JavaScript skill has the full measured model.
Integration-Specific Gotchas
Google Sheets
NEVER use
appendon sheets with formula columns — it breaks formulas. Use Google Sheets APIvalues.update(PUT) via HTTP Request node with agoogleApicredentialWrite numbers, not strings for formula-dependent columns — string "4.98" breaks
ADD()formulas. Convert in the column's expression:{{ $json.price.toNumber() }}or{{ parseFloat($json.price) }}Per-item execution trap: Google Sheets nodes execute once per input item. If you need a single bulk write, collect the rows into one item with an Aggregate node first
UNFORMATTED_VALUE returns numbers, not text like "N/A" — filter explicitly with a Filter node
Google Drive
convertToGoogleDocument: truecreates a Google Doc (text), NOT a Google Sheet — to upload a CSV for download, omit this option entirelyCSV download link format:
https://drive.google.com/uc?id={fileId}&export=download— use instead of/viewlinks
Bidirectional Threshold Checking
When comparing values (prices, quantities, metrics), always check both directions:
// ❌ Only catches increases
if (diff > threshold) { flag(); }
// ✅ Catches both spikes AND crashes — both are data-quality signals
if (Math.abs(diff) > threshold) { flag(); }Common Gotchas
1. Webhook Data Structure
Problem: Can't access webhook payload data
Solution: Data is nested under $json.body
❌ {{$json.email}}
✅ {{$json.body.email}}See: n8n Expression Syntax skill
2. Multiple Input Items
Problem: Node processes all input items, but I only want one
Solution: Use "Execute Once" mode or process first item only
{{$json[0].field}} // First item only3. Authentication Issues
Problem: API calls failing with 401/403
Solution:
Configure credentials properly
Use the "Credentials" section, not parameters
Test credentials before workflow activation
4. Node Execution Order
Problem: Nodes executing in unexpected order
Solution: Check workflow settings → Execution Order
v0: Top-to-bottom (legacy)
v1: Connection-based (recommended)
5. Expression Errors
Problem: Expressions showing as literal text
Solution: Use {{}} around expressions
See n8n Expression Syntax skill for details
Integration with Other Skills
These skills work together with Workflow Patterns:
n8n MCP Tools Expert - Use to:
Find nodes for your pattern (search_nodes)
Understand node operations (get_node)
Create workflows (n8n_create_workflow)
Deploy templates (n8n_deploy_template)
Use
tools_documentation({topic: "ai_agents_guide", depth: "full"})for AI pattern guidanceManage data tables with
n8n_manage_datatableOrganize workflows into folders with
n8n_manage_folders
n8n Expression Syntax - Use to:
Write expressions in transformation nodes
Access webhook data correctly ({{$json.body.field}})
Reference previous nodes ({{$node["Node Name"].json.field}})
n8n Node Configuration - Use to:
Configure specific operations for pattern nodes
Understand node-specific requirements
n8n Validation Expert - Use to:
Validate workflow structure
Fix validation errors
Ensure workflow correctness before deployment
Pattern Statistics
Common workflow patterns:
Most Common Triggers:
Webhook - 35%
Schedule (periodic tasks) - 28%
Manual (testing/admin) - 22%
Service triggers (Slack, email, etc.) - 15%
Most Common Transformations:
Set (field mapping) - 68%
Code (custom logic) - 42%
IF (conditional routing) - 38%
Switch (multi-condition) - 18%
Most Common Outputs:
HTTP Request (APIs) - 45%
Slack - 32%
Database writes - 28%
Email - 24%
Average Workflow Complexity:
Simple (3-5 nodes): 42%
Medium (6-10 nodes): 38%
Complex (11+ nodes): 20%
Quick Start Examples
Example 1: Simple Webhook → Slack
1. Webhook (path: "form-submit", POST)
2. Slack (post message to #notifications; the text maps $json.body fields with expressions)Example 2: Scheduled Report
1. Schedule (daily at 9 AM)
2. HTTP Request (fetch analytics)
3. Summarize (totals per group)
4. Email (send formatted report)
5. Error Trigger → Slack (notify on failure)Example 3: Database Sync
1. Schedule (every 15 minutes)
2. Postgres (query new records)
3. IF (check if records exist)
4. MySQL (insert records)
5. Postgres (update sync timestamp)Example 4: AI Assistant
1. Webhook (receive chat message)
2. AI Agent
├─ OpenAI Chat Model (ai_languageModel)
├─ HTTP Request Tool (ai_tool)
├─ Database Tool (ai_tool)
└─ Window Buffer Memory (ai_memory)
3. Webhook Response (send AI reply)Example 5: API Integration
1. Manual Trigger (for testing)
2. HTTP Request (GET /api/users; pagination option if the API pages)
3. Postgres (upsert users; map the fields in the node's column slots)No loop and no Set: Postgres processes every item, and the column slots take the mapping expressions.
Detailed Pattern Files
For comprehensive guidance on each pattern:
webhook_processing.md - Webhook patterns, data structure, response handling
http_api_integration.md - REST APIs, authentication, pagination, retries
database_operations.md - Queries, sync, transactions, batch processing
ai_agent_workflow.md - AI agents, tools, memory, langchain nodes
scheduled_tasks.md - Cron schedules, reports, maintenance tasks
Real Template Examples
From n8n template library:
Template #2947: Weather to Slack
Pattern: Scheduled Task
Nodes: Schedule → HTTP Request (weather API) → Set → Slack
Complexity: Simple (4 nodes)
Webhook Processing: Most common pattern
Most common: Form submissions, payment webhooks, chat integrations
HTTP API: Common pattern
Most common: Data fetching, third-party integrations
Database Operations: Common pattern
Most common: ETL, data sync, backup workflows
AI Agents: Growing in usage
Most common: Chatbots, content generation, data analysis
Use search_templates and get_template from n8n-mcp tools to find examples!
Best Practices
✅ Do
Start with the simplest pattern that solves your problem
Plan your workflow structure before building
Use error handling on all workflows
Test with sample data before activation
Follow the workflow creation checklist
Use descriptive node names
Document complex workflows (notes field)
Monitor workflow executions after deployment
❌ Don't
Build workflows in one shot (iterate! avg 56s between edits)
Skip validation before activation
Ignore error scenarios
Use complex patterns when simple ones suffice
Hardcode credentials in parameters
Forget to handle empty data cases
Mix multiple patterns without clear boundaries
Deploy without testing
Summary
Key Points:
6 core patterns cover 90%+ of workflow use cases
Webhook processing is the most common pattern
Use the workflow creation checklist for every workflow
Plan pattern → Select nodes → Build → Validate → Deploy
Integrate with other skills for complete workflow development
Next Steps:
Identify your use case pattern
Read the detailed pattern file
Use n8n MCP Tools Expert to find nodes
Follow the workflow creation checklist
Use n8n Validation Expert to validate
Related Skills:
n8n MCP Tools Expert - Find and configure nodes
n8n Expression Syntax - Write expressions correctly
n8n Validation Expert - Validate and fix errors
n8n Node Configuration - Configure specific operations
Files
- ATTRIBUTION.mdAdded by AutoGineer899 B
- LICENSELicence file added by AutoGineer1.1 KiB
- README.md6.9 KiB
- SKILL.md21.5 KiB
- ai_agent_workflow.md9.7 KiB
- database_operations.md16.6 KiB
- http_api_integration.md16.0 KiB
- scheduled_tasks.md16.6 KiB
- webhook_processing.md13.3 KiB
webhook_processing.md
Webhook Processing Pattern
Use Case: Receive HTTP requests from external systems and process them instantly.
Pattern Structure
Webhook → [Validate] → [Transform] → [Action] → [Response/Notify]Key Characteristic: Instant event-driven processing
Core Components
1. Webhook Node (Trigger)
Purpose: Create HTTP endpoint to receive data
Configuration:
{
path: "form-submit", // URL path: https://n8n.example.com/webhook/form-submit
httpMethod: "POST", // GET, POST, PUT, DELETE
responseMode: "onReceived", // or "lastNode" for custom response
responseData: "allEntries" // or "firstEntryJson"
}Critical Gotcha: Data is nested under $json.body
❌ {{$json.email}}
✅ {{$json.body.email}}2. Validation (Optional but Recommended)
Purpose: Verify incoming data before processing
Options:
IF node - Check required fields exist (one condition per rule)
Stop and Error - Fail gracefully with message
Code node - Only when the caller needs per-field error messages (a loop over a schema; see
n8n-error-handling)
Example:
// IF node condition
{{$json.body.email}} is not empty AND
{{$json.body.name}} is not empty3. Transformation
Purpose: Map webhook data to desired format
Typical nodes:
None - Map fields in the action node's own slots (
{{ $json.body.email }}straight in the CRM or database node)Edit Fields (Set) - A named step: a payload several nodes read, constants, an error or return item
Native transforms - Split Out, Filter, Summarize, Date & Time (see the job-to-node table in
using-n8n-mcp-skills)
Example (Edit Fields, when several nodes read these values):
{
"user_email": "={{$json.body.email}}",
"user_name": "={{$json.body.name}}",
"timestamp": "={{$now}}"
}4. Action
Purpose: Do something with the data
Common actions:
Store in database (Postgres, MySQL, MongoDB)
Send notification (Slack, Email, Discord)
Call another API (HTTP Request)
Update external system (CRM, support ticket)
5. Response (If responseMode: "lastNode")
Purpose: Send custom HTTP response
Webhook Response Node:
{
statusCode: 200,
headers: {
"Content-Type": "application/json"
},
body: {
"status": "success",
"message": "Form received"
}
}Common Use Cases
1. Form Submissions
Flow: Form → Webhook → Validate → Database → Email Confirmation
Example:
1. Webhook (path: "contact-form", POST)
2. IF (check email & message not empty)
3. Postgres (insert into contacts table)
4. Email (send confirmation to user)
5. Slack (notify team in #leads)
6. Webhook Response ({"status": "success"})Real Data Access:
Name: {{$json.body.name}}
Email: {{$json.body.email}}
Message: {{$json.body.message}}2. Payment Webhooks (Stripe, PayPal)
Flow: Payment Provider → Webhook → Verify → Update Database → Send Receipt
Security: Verify webhook signatures — with the provider's trigger node when one exists (Stripe Trigger, GitHub Trigger), otherwise natively:
Webhook (options.rawBody: true)
→ Crypto (hmac SHA256 over the binary "data"; secret from a crypto credential)
→ IF (signature header equals the computed value) → process / Respond 401The signature is computed over the raw body; re-serialising $json.body breaks it. Stripe signs
<timestamp>.<raw body> rather than the body alone, so its check needs that string built first. Full node JSON:
n8n-node-configuration → NATIVE_NODES.md → "Webhook signature".
3. Chat Platform Integrations (Slack, Discord, Teams)
Flow: Chat Command → Webhook → Process → Respond
Example (Slack slash command):
1. Webhook (path: "slack-command", POST)
2. HTTP Request (fetch data from API; query = {{ $json.body.text }})
3. Respond to Webhook (immediate Slack response; the message is built with expressions from $json and $('Webhook').item.json.body)The Slack payload fields are read where they're used ($json.body.text, $json.body.user_id); no parsing node is needed.
Slack Data Access:
Command: {{$json.body.command}}
Text: {{$json.body.text}}
User ID: {{$json.body.user_id}}
Channel ID: {{$json.body.channel_id}}4. GitHub/GitLab Webhooks
Flow: Git Event → Webhook → Parse → Notify/Deploy
Example (new PR notification):
1. Webhook (path: "github", POST)
2. IF (check $json.body.action equals "opened")
3. Slack (notify #dev-team; title, author and URL read with the expressions below)
4. Webhook Response (200 OK)The GitHub Trigger node registers the webhook and filters events for you; prefer it over a bare Webhook (service node first).
GitHub Data Access:
Event Type: {{$json.headers['x-github-event']}}
Action: {{$json.body.action}}
PR Title: {{$json.body.pull_request.title}}
Author: {{$json.body.pull_request.user.login}}
URL: {{$json.body.pull_request.html_url}}5. IoT Device Data
Flow: Device → Webhook → Validate → Store → Alert (if threshold)
Example (temperature sensor):
1. Webhook (path: "sensor-data", POST)
2. Postgres (insert into sensor_readings; columns from $json.body.*)
3. IF (temperature > 80)
4. Email (alert admin)Webhook Data Structure
Standard Structure
{
"headers": {
"content-type": "application/json",
"user-agent": "...",
"x-custom-header": "..."
},
"params": {
"id": "123" // From URL: /webhook/form/:id
},
"query": {
"token": "abc" // From URL: /webhook/form?token=abc
},
"body": {
// ⚠️ YOUR DATA IS HERE!
"name": "John",
"email": "[email protected]"
}
}Accessing Different Parts
// Headers
{{$json.headers['content-type']}}
{{$json.headers['x-api-key']}}
// URL Parameters
{{$json.params.id}}
// Query Parameters
{{$json.query.token}}
{{$json.query.page}}
// Body (MOST COMMON)
{{$json.body.email}}
{{$json.body.user.name}}
{{$json.body.items[0].price}}Authentication & Security
1. Header or Basic Auth (shared secret)
Simple and enough for most internal callers
Set the Webhook node's authentication to headerAuth (or basicAuth / jwtAuth) and attach a credential. n8n
rejects requests without the right header before the workflow runs. Never compare a token in an IF node: the secret
then sits in the workflow JSON, which breaks the "secrets never go in text fields" rule.
{ "httpMethod": "POST", "path": "orders", "authentication": "headerAuth", "responseMode": "responseNode", "options": {} }Query-string tokens leak into logs and browser history; prefer a header.
2. Signature Verification (HMAC)
Best security (for webhooks from services like GitHub, Shopify, Stripe)
Webhook (options.rawBody: true)
→ Crypto (typeVersion 2, action hmac, type SHA256, binaryData true, binaryPropertyName "data", encoding hex;
secret from a crypto credential)
→ IF {{ $('Webhook').item.json.headers['x-hub-signature-256'] }} equals {{ 'sha256=' + $json.computedSignature }}
├─ true → process
└─ false → Respond to Webhook 401Compute over the raw body (
rawBody: trueputs it in binarydata);JSON.stringify($json.body)changes the bytes.Header name and prefix differ per provider (GitHub
x-hub-signature-256: sha256=…, Shopify base64). Read their docs.Use the provider's trigger node if n8n has one (GitHub Trigger, Stripe Trigger) before building this by hand.
Full JSON:
n8n-node-configuration→ NATIVE_NODES.md → "Webhook signature".
3. IP Allowlist
Restrict access by IP with the Webhook node's options.ipWhitelist ("IP(s) Allowlist"): comma-separated
addresses or CIDR ranges; empty allows all. Good for internal callers with fixed addresses, on top of auth.
Response Modes
onReceived (Default)
Behavior: Immediate 200 OK response, workflow continues in background
Use when:
Long-running workflows
Response doesn't depend on workflow result
Fire-and-forget processing
Configuration:
{
responseMode: "onReceived",
options: { responseCode: { values: { responseCode: 200 } } } // Webhook v2+: a nested collection
}lastNode (Custom Response)
Behavior: Wait for workflow completion, send custom response
Use when:
Need to return data to caller
Synchronous processing required
Form submissions with confirmation
Configuration:
{
responseMode: "lastNode"
}Then add Webhook Response node:
{
statusCode: 200,
headers: {
"Content-Type": "application/json"
},
body: {
"id": "={{$json.record_id}}",
"status": "success"
}
}Error Handling
Pattern 1: Try-Catch with Error Trigger
Main Flow:
Webhook → [nodes...] → Success Response
Error Flow:
Error Trigger → Log Error → Slack Alert → Error ResponseError Trigger Configuration:
{
workflowId: "current-workflow-id"
}Error Response (if responseMode: "lastNode"):
{
statusCode: 500,
body: {
"status": "error",
"message": "Processing failed"
}
}Pattern 2: Validation Early Exit
Webhook → IF (validate) → [True: Process]
└→ [False: Error Response]False Branch Response:
{
statusCode: 400,
body: {
"status": "error",
"message": "Invalid data: missing email"
}
}Pattern 3: Continue On Fail
Per-node setting: Continue even if node fails
Use case: Non-critical notifications
Webhook → Database (critical) → Slack (continueOnFail: true)Testing Webhooks
1. Use Manual Trigger
Replace Webhook with Manual Trigger for testing:
Manual Trigger → [set test data] → rest of workflow2. Use curl
curl -X POST https://n8n.example.com/webhook/form-submit \
-H "Content-Type: application/json" \
-d '{"email": "[email protected]", "name": "Test User"}'3. Use Postman/Insomnia
Create request collection
Test different payloads
Verify responses
4. Webhook.site
Use webhook.site for testing
Copy webhook.site URL to your service
View requests and debug
Performance Considerations
Large Payloads
Webhook timeout: 120 seconds (default)
For large data, consider async processing:
Webhook → Queue (Redis/DB) → Response (immediate) Separate Workflow: Schedule → Check Queue → Process
High Volume
Use "Execute Once" mode if processing all items together
Consider rate limiting
Monitor execution times
Scale n8n instance if needed
Retries
Webhook calls typically don't retry automatically
Implement retry logic on caller side
Or use queue pattern for guaranteed processing
Common Gotchas
1. ❌ Wrong: Accessing webhook data
{{$json.email}} // Empty or undefined✅ Correct
{{$json.body.email}} // Data is under .body2. ❌ Wrong: Response mode confusion
Using Webhook Response node with responseMode: "onReceived" (ignored)
✅ Correct
Set responseMode: "responseNode" to use a Respond to Webhook node (lastNode returns the last node's output instead)
3. ❌ Wrong: No validation
Assuming data is always present and valid
✅ Correct
Validate data early with an IF node (per-field messages: the Code validator in n8n-error-handling)
4. ❌ Wrong: Hardcoded paths
Using same path for dev/prod
✅ Correct
Use environment variables: {{$env.WEBHOOK_PATH_PREFIX}}/form-submit
Real Template Examples
From n8n template library (1,085 webhook templates):
Simple Form to Slack:
Webhook → Set → SlackPayment Processing:
Webhook → Verify Signature → Update Database → Send Receipt → Notify AdminChat Bot:
Webhook → Parse Command → AI Agent → Format Response → Webhook ResponseUse search_templates({query: "webhook"}) to find more!
Checklist for Webhook Workflows
Setup
[ ] Choose descriptive webhook path
[ ] Configure HTTP method (POST most common)
[ ] Choose response mode (onReceived vs lastNode)
[ ] Test webhook URL before connecting services
Security
[ ] Add authentication (token, signature, IP whitelist)
[ ] Validate incoming data
[ ] Sanitize user input (if storing/displaying)
[ ] Use HTTPS (always)
Data Handling
[ ] Remember data is under $json.body
[ ] Handle missing fields gracefully
[ ] Transform data to desired format
[ ] Log important data (for debugging)
Error Handling
[ ] Add Error Trigger workflow
[ ] Validate required fields
[ ] Return appropriate error responses
[ ] Alert team on failures
Testing
[ ] Test with curl/Postman
[ ] Test error scenarios
[ ] Verify response format
[ ] Monitor first executions
Summary
Key Points:
Data under $json.body (most common mistake!)
Validate early to catch bad data
Choose response mode based on use case
Secure webhooks with auth
Handle errors gracefully
Pattern: Webhook → Validate → Transform → Action → Response
Related:
n8n Expression Syntax - Accessing webhook data correctly
http_api_integration.md - Making HTTP requests in response
Requirements and compatibility
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Needs Node.js
Security
What our scanner noticed· Medium risk
- Possible data-exfiltration endpoints
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Created by
- Romuald Czlonkowski
- Publisher
- Romuald Czlonkowski (Community)
- Source
- czlonkowski/n8n-skills · skills/n8n-workflow-patterns · commit e037563
- Licence
- MIT License (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by Romuald Czlonkowski or Romuald Czlonkowski.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download n8n-workflow-patterns.zip